$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json) Hash identifier: KHhlbC0DnsXQERDKrn0/7D5FfpDMwr50RYMAF8Eaboo= Subject key identifier: AA:FC:F0:17:7D:F1:CB:B4:5B:D1:87:63:AC:88:DB:93:3F:96:D1:C1 Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft Manifest number: 46 Signing time: Sat 19 Jul 2025 07:42:05 +0000 Manifest this update: Sat 19 Jul 2025 07:42:04 +0000 Manifest next update: Sat 26 Jul 2025 07:42:04 +0000 Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: wjUDoNPOQZU2pq6SUJu/1lv4WEIHkbxRu4GoZQDBBK4=) 2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: v8UVd7Qbh3NtEsQhX1pG9Dfe5py3W8ZuLzV2zz17/Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Validity Not Before: Jul 19 07:42:04 2025 GMT Not After : Jul 26 07:42:04 2025 GMT Subject: CN=687b4c4d-4392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:98:96:3e:5a:12:d5:11:ab:8c:df:27:64: b2:97:bf:f3:92:43:a7:7d:44:97:96:32:48:ae:85: ea:b9:90:b5:e4:b2:a0:d9:0c:ec:bc:d7:a5:a0:43: 82:46:55:69:0b:92:c0:4b:40:0e:8e:51:c8:81:b4: 43:9d:19:1c:31:b5:f2:04:e2:be:4a:c7:2a:34:34: 97:29:ed:a2:47:2a:dc:c7:2e:e1:a7:b4:07:6a:8f: 75:17:01:3a:c2:25:eb:dc:f7:fe:01:96:15:0c:74: 4f:39:35:a3:25:4d:a9:cc:cf:5e:d1:08:4a:48:ea: be:78:31:f8:53:c3:5c:55:28:b2:19:ac:90:a8:70: 7f:92:97:8e:4d:d3:a8:70:db:0e:0c:79:ce:99:c2: b4:60:51:90:c0:63:66:83:6e:4c:19:7d:54:35:25: e8:df:53:3c:a9:02:e0:79:ac:48:05:4f:27:d9:71: 95:88:60:78:77:52:43:58:66:96:bd:e5:7d:ec:46: 5e:94:64:e9:4b:d9:89:b7:89:78:db:7b:d9:ba:20: 1d:bf:47:d6:3f:86:53:95:f3:11:1f:13:3b:1f:f9: a8:74:0b:f3:c7:63:c7:35:76:96:01:9b:a0:09:95: c4:34:c1:1c:1a:44:bc:87:3e:12:46:65:94:38:39: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:F0:17:7D:F1:CB:B4:5B:D1:87:63:AC:88:DB:93:3F:96:D1:C1 X509v3 Authority Key Identifier: keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d1:e1:73:c8:91:27:8d:25:86:9f:86:d3:cc:8b:00:91:69: e1:11:a1:44:57:aa:b2:f7:5d:bf:44:c7:bb:fe:64:6c:7c:ba: 69:6d:cd:62:fa:4a:64:63:4c:05:8e:97:e8:fe:0e:86:8d:ef: 6f:ac:54:c6:b1:c3:6b:31:e0:6d:87:ce:a5:93:04:e4:ba:85: d7:05:c5:92:77:95:b5:ec:24:7e:dd:6b:2c:d6:fd:5b:25:fa: fe:6e:4d:a7:f1:94:42:39:75:15:04:53:6f:61:9f:98:a6:f2: a3:a9:a5:72:dd:07:2d:62:d0:15:fb:9f:2c:34:47:b8:02:68: 01:fd:9e:e5:5a:d1:35:c2:cd:95:b8:cc:da:6f:4f:b1:46:4d: 48:92:51:ae:ca:ec:34:e5:ab:5b:30:b0:18:58:ec:cb:ab:89: 0b:db:fd:37:6e:4a:9b:66:6e:3c:93:27:63:fd:5a:e1:b4:0e: 17:94:36:fe:c9:c4:84:3e:78:c4:1b:62:37:12:fa:e5:79:0b: e7:5c:7b:03:43:1f:73:02:f2:c3:42:fc:d3:98:ce:8f:85:17: 45:93:58:1c:96:29:7b:a8:d0:6c:1e:6b:53:58:3f:a6:e8:4c: 19:68:33:e5:f7:a0:5f:50:eb:6c:be:d3:00:a7:16:f2:c7:70: 2c:44:3c:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoODU3OUJFMkQ4MzQ1NjgyRjI3QUVFNzA2MkJCRDRFRjc2 NjRFNTcxQjAeFw0yNTA3MTkwNzQyMDRaFw0yNTA3MjYwNzQyMDRaMBgxFjAUBgNV BAMTDTY4N2I0YzRkLTQzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6VpiWPloS1RGrjN8nZLKXv/OSQ6d9RJeWMkiuheq5kLXksqDZDOy816WgQ4JG VWkLksBLQA6OUciBtEOdGRwxtfIE4r5Kxyo0NJcp7aJHKtzHLuGntAdqj3UXATrC Jevc9/4BlhUMdE85NaMlTanMz17RCEpI6r54MfhTw1xVKLIZrJCocH+Sl45N06hw 2w4Mec6ZwrRgUZDAY2aDbkwZfVQ1JejfUzypAuB5rEgFTyfZcZWIYHh3UkNYZpa9 5X3sRl6UZOlL2Ym3iXjbe9m6IB2/R9Y/hlOV8xEfEzsf+ah0C/PHY8c1dpYBm6AJ lcQ0wRwaRLyHPhJGZZQ4OYezAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqvzwF33x y7Rb0YdjrIjbkz+W0cEwHwYDVR0jBBgwFoAUhXm+LYNFaC8nrucGK71O92ZOVxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzdFQzAwNzZDRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4bnJ1Y0dLNzFPOTJaT1Z4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFhtLUxZTkZhQzhucnVjR0s3MU85MlpPVnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzdFQzAwNzZDRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4 bnJ1Y0dLNzFPOTJaT1Z4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/R4XPIkSeNJYafhtPMiwCRaeERoURXqrL3Xb9Ex7v+ZGx8umltzWL6 SmRjTAWOl+j+DoaN72+sVMaxw2sx4G2HzqWTBOS6hdcFxZJ3lbXsJH7dayzW/Vsl +v5uTafxlEI5dRUEU29hn5im8qOppXLdBy1i0BX7nyw0R7gCaAH9nuVa0TXCzZW4 zNpvT7FGTUiSUa7K7DTlq1swsBhY7MuriQvb/TduSptmbjyTJ2P9WuG0DheUNv7J xIQ+eMQbYjcS+uV5C+dcewNDH3MC8sNC/NOYzo+FF0WTWByWKXuo0Gwea1NYP6bo TBloM+X3oF9Q62y+0wCnFvLHcCxEPNc= -----END CERTIFICATE-----Generated at Mon Jul 21 06:41:58 2025 by rpki-client